How to enable HTML tag for members ?

[Tjda]

It's a Simple question, how to enable HTML tag for members, by default only admins have it.

This tag:

Code Select Expand

[html][/html]

[Dannii]

That would be a big security risk. Why do you want to?

[N3RVE]

Indeed. Although this can be accomplished, the forum will be vulnerable to hacker attacks. There's a reason why it's limited to Administrators only.

-[n3rve]

[Tjda]

hum... I had one forum, with almost 3 years, with the HTML permission enable, and the forum have more than 17 000 members 

the risk in SMF 2.0 is the same at SMF 1.1.x ?

[sAce]

off topic :p

but what exactly is the risk,
i know there is a risk, but what is it ? can anyone please explain.

------------------------------------------------
1stly you shouldn't enable is for regulars
but if you are ok with the risk then ,
topics & posts >>  bbc codes

[N3RVE]

Bottom line, it is not recommended and never will because it makes the forum susceptible to attacks, HTML can be used to hack the forum. What exactly is it you want to do with HTML that BBC can't handle?

-[n3rve]

[Arantor]

off topic :p

but what exactly is the risk,
i know there is a risk, but what is it ? can anyone please explain.

If you allow members to put in arbitrary HTML, that includes arbitrary Javascript, Flash, Java... any kind of malware you can think of can be embedded like that and downloaded to the user's computer - potentially infecting them with more.

[H]

Admin area > Posts and Topics > Bulletin Board Code >  Enable basic HTML in posts

That setting will enable safe html in posts.
There is also a mod that lets you choose which membergroups can use the html bbcode however this has not yet been upgraded for SMF 2.0

[Tjda]

how to enable for mods ?

[Arantor]

That setting will enable basic HTML for all users, not full HTML for admins+mods.

[Tjda]

y, i talking about tag HTML for mods

[Arantor]

There isn't a mod for it other than the one mentioned above.

I might - if I get time - look at writing it because it shouldn't be a huge mod.

What would you need mods to post in raw HTML that couldn't be expressed in, say, custom BBcode?

[Tjda]

Embed videos, images (deviantart) and games from  many sites.

[Arantor]

Video embedder - AEVA, plus other mods.

Images - [img] usually works well enough, not sure what they'd need that img doesn't provide.

Games - you can embed Flash already without giving out HTML access, though it's limited.

[Tjda]

i know, but HTML tag is more easy for members.

is easy edit the AEVA ?

[Arantor]

AEVA - members just copy and paste the URL in, no more than that.

[Tjda]

i know xD

edit, but is for add new sites for AEVA

[Arantor]

Which sites doesn't it cover? It already has over 200 video sharing sites.

[H]

Indeed, and you can likely request additional sites in the mods topic, if you need to